$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json) Hash identifier: 7lfKE04yErL2rSMZEzSEignclC5XPGSKDyKgd5SHspU= Subject key identifier: 8C:35:7F:B6:5E:02:B7:13:05:DE:D2:EB:1D:4A:E3:19:B9:88:A2:04 Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Certificate serial: 03F80D9F657C56EA5E703CA3D8B0364B8C5FBAF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft Manifest number: 9D Signing time: Fri 08 Aug 2025 13:11:46 +0000 Manifest this update: Fri 08 Aug 2025 13:06:46 +0000 Manifest next update: Mon 11 Aug 2025 20:06:46 +0000 Files and hashes: 1: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: x/vtNdgftiP2gNHQRXmqF+bNIt+0K74KbEvvSueFvXY=) 2: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: xFANumdUyKpMuZLhiBvn5o7YXv1OgbNq6H9FiEIythc=) 3: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: jM3o+qLgLitpWG9aIDTu7g7FqrNoiH7dHWh51KuZSvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f8:0d:9f:65:7c:56:ea:5e:70:3c:a3:d8:b0:36:4b:8c:5f:ba:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Validity Not Before: Aug 8 13:06:46 2025 GMT Not After : Aug 11 20:06:46 2025 GMT Subject: CN=8C357FB65E02B71305DED2EB1D4AE319B988A204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:15:12:bd:fa:65:b5:5a:43:cb:fe:f3:5c: 1a:78:c1:1e:66:69:63:c8:e7:01:ce:b5:9b:d0:6f: 29:7a:af:32:7d:15:47:aa:ec:65:9f:7a:ef:36:af: db:1f:79:3b:84:09:1f:f5:29:f9:47:89:34:f9:00: 32:1e:7a:f0:10:53:74:b0:0b:4f:2a:7d:f4:df:a9: 1f:c6:2d:b1:d3:55:87:c8:fb:8b:e1:73:24:1b:01: e8:8a:d4:3c:78:07:4d:7e:e9:b0:3b:a9:a1:75:d8: c3:ea:5a:21:1b:a4:d6:7a:91:de:e2:b3:a5:94:8e: a1:03:ce:40:bf:b6:15:1b:a0:62:df:3a:ae:33:12: 9b:b1:3e:44:8d:7d:5b:b8:fb:f7:d9:70:42:64:d5: e7:7c:80:6d:c3:2f:63:94:6e:3d:b8:72:06:12:0f: 64:26:35:d5:d5:e4:f5:27:4f:95:ec:4a:40:74:41: 80:d2:ad:31:58:d0:4b:14:26:84:0c:4a:1c:41:ef: 1f:68:b9:0c:bd:fb:7b:f2:cf:cf:f6:94:df:b6:b9: a2:b8:c9:26:72:ee:ba:88:45:f0:67:47:29:76:47: ac:f9:37:cc:0a:c9:aa:aa:79:c8:d4:f8:68:a4:b0: dc:3a:49:f3:b7:64:c2:07:3e:24:8b:0e:3e:62:76: 3a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:35:7F:B6:5E:02:B7:13:05:DE:D2:EB:1D:4A:E3:19:B9:88:A2:04 X509v3 Authority Key Identifier: keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b2:7f:53:bb:37:bd:58:ea:a6:01:28:30:6d:e3:0a:e0:a3: 37:b2:be:c4:16:be:cc:0e:43:98:e2:19:2a:d2:79:17:73:ea: eb:30:25:47:b8:59:78:db:e6:4c:4c:a1:a3:13:bc:3d:12:4d: 8d:b7:23:42:ed:53:0a:f0:87:3a:e4:f0:b2:ad:e5:67:20:8a: e7:5f:05:16:29:9f:09:10:3e:9e:85:20:98:37:2d:e2:8f:90: ac:c2:93:d0:0c:ee:69:90:30:61:c3:0b:e5:94:ce:b7:7b:05: 91:bc:e5:ef:40:5c:26:d8:4b:29:35:ff:76:2c:79:43:22:fe: 49:a9:bf:f7:6d:75:3e:6b:7c:17:2a:d2:ad:19:fc:81:bd:8b: 2f:96:22:ca:41:e2:08:23:5e:c3:91:f8:6d:e2:20:88:d1:dd: 15:58:18:0f:e4:c4:4e:b1:61:a2:88:fb:b4:39:34:e9:99:cf: de:ea:12:95:6b:6b:bb:96:29:77:f2:b2:d9:9b:83:c8:fd:0c: 4d:ec:91:0a:99:a9:4e:f5:62:04:90:85:f3:d6:ef:c7:c0:39: 49:cf:7b:bc:98:40:bd:ec:b3:f9:ab:d0:59:cf:ab:35:33:fe: 9d:75:5e:63:42:06:4e:97:21:02:b3:2f:5c:7b:57:65:a3:55: 5d:87:bf:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/gNn2V8VupecDyj2LA2S4xfuvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2 QkZBQzQ3MzAeFw0yNTA4MDgxMzA2NDZaFw0yNTA4MTEyMDA2NDZaMDMxMTAvBgNV BAMTKDhDMzU3RkI2NUUwMkI3MTMwNURFRDJFQjFENEFFMzE5Qjk4OEEyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ4xUSvfpltVpDy/7zXBp4wR5m aWPI5wHOtZvQbyl6rzJ9FUeq7GWfeu82r9sfeTuECR/1KflHiTT5ADIeevAQU3Sw C08qffTfqR/GLbHTVYfI+4vhcyQbAeiK1Dx4B01+6bA7qaF12MPqWiEbpNZ6kd7i s6WUjqEDzkC/thUboGLfOq4zEpuxPkSNfVu4+/fZcEJk1ed8gG3DL2OUbj24cgYS D2QmNdXV5PUnT5XsSkB0QYDSrTFY0EsUJoQMShxB7x9ouQy9+3vyz8/2lN+2uaK4 ySZy7rqIRfBnRyl2R6z5N8wKyaqqecjU+GiksNw6SfO3ZMIHPiSLDj5idjqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjDV/tl4CtxMF3tLrHUrjGbmIogQwHwYDVR0j BBgwFoAUMMiWRz/F3kA/RlEFn2vhWGv6xHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC8zMEM4OTY0NzNG QzVERTQwM0Y0NjUxMDU5RjZCRTE1ODZCRkFDNDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2QkZB QzQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUx NTg2QkZBQzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWyf1O7N71Y6qYBKDBt4wrgozeyvsQWvswO Q5jiGSrSeRdz6uswJUe4WXjb5kxMoaMTvD0STY23I0LtUwrwhzrk8LKt5Wcgiudf BRYpnwkQPp6FIJg3LeKPkKzCk9AM7mmQMGHDC+WUzrd7BZG85e9AXCbYSyk1/3Ys eUMi/kmpv/dtdT5rfBcq0q0Z/IG9iy+WIspB4ggjXsOR+G3iIIjR3RVYGA/kxE6x YaKI+7Q5NOmZz97qEpVra7uWKXfystmbg8j9DE3skQqZqU71YgSQhfPW78fAOUnP e7yYQL3ss/mr0FnPqzUz/p11XmNCBk6XIQKzL1x7V2WjVV2Hv10= -----END CERTIFICATE-----Generated at Sun Aug 10 14:01:12 2025 by rpki-client